$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa File: 8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa (raw, json) Hash identifier: pXwqfcFpb/llSLeCjV9TCmlFJ0HWWjewrzJJGluBPwk= Subject key identifier: 70:AA:12:19:4D:A2:38:1F:4C:2F:8B:0A:D5:9F:82:C0:8E:6F:FF:F4 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584AA85BAC883C67E126174CA600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 130.137.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ac:88:3c:67:e1:26:17:4c:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=1f425b6d-7078-4055-b845-4e445d3beee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:08:0e:fb:1c:8f:06:13:a8:2e:f5:1e:74:fc: b6:24:39:e1:8a:27:d3:4e:19:c0:65:6a:7d:eb:fc: 94:9a:81:d2:de:61:30:5d:6d:c4:28:41:ce:35:e9: dd:8a:76:00:d5:f3:1c:17:8b:4b:aa:44:36:05:60: 69:dc:4f:bd:6b:28:29:b9:ec:27:34:2d:b7:37:83: 13:f5:5a:d9:8a:e4:25:40:79:b8:42:64:22:3d:c1: 2e:09:f3:c8:5b:ea:4e:66:65:23:4a:b1:8e:2a:a4: c1:57:bd:af:7c:58:39:5a:4c:33:61:a3:e0:f8:03: 46:67:5c:0c:6d:16:71:34:94:de:6e:a8:a1:ba:8e: cb:6e:15:24:ff:7f:88:9b:1b:2f:fe:cf:75:44:ab: 91:df:a5:77:8b:b7:5b:1e:9f:7b:79:7d:f0:81:77: fe:16:10:45:9e:48:ca:d7:46:06:55:c1:23:59:47: fd:db:77:b9:25:6a:e2:1b:d6:47:f6:1c:76:49:f1: 15:09:e0:ab:6c:22:3e:0c:2e:cd:57:76:e3:8b:34: 21:e6:f8:aa:08:c5:34:78:a9:91:3f:f5:8b:f6:f1: be:1f:1c:54:ee:04:76:4c:20:d0:c2:b8:09:c2:3c: 1c:d9:04:eb:09:02:b6:12:e0:6a:0f:d7:89:83:23: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AA:12:19:4D:A2:38:1F:4C:2F:8B:0A:D5:9F:82:C0:8E:6F:FF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:56:54:2e:c2:f4:fd:4d:db:ea:82:09:ed:47:a9:7c:91:27: 6b:4b:ba:98:17:1b:a9:a0:e4:cd:44:b8:2a:78:00:11:32:9e: 22:04:e1:3d:4e:33:6a:81:05:be:50:57:c2:cf:1f:10:67:2d: 7d:c2:ea:56:04:7e:61:7d:a5:41:7a:86:95:6a:81:21:c5:68: 23:5c:39:5f:32:5f:5d:1e:3b:ff:b8:ee:f6:4f:e6:a9:83:47: 36:ae:d0:df:0d:2f:ac:3f:2b:7a:bd:55:54:3d:b2:4b:cd:f9: 34:4f:a3:16:96:52:8f:7b:d8:bb:67:e2:19:25:98:42:bc:46: 8a:cc:69:b0:24:45:24:17:d8:1b:e7:d1:e5:ff:98:c1:cf:f4: 89:a1:ad:c1:80:27:3d:95:10:77:17:56:e0:cb:d9:c3:fa:3d: 54:0c:f4:78:de:4d:2b:a8:03:18:89:3f:b2:5c:4d:98:04:86: 2c:72:17:95:66:bd:e3:dd:4d:51:f9:ca:24:22:0e:82:69:fd: d9:a2:28:1f:3f:6e:a9:03:0a:c9:b9:c0:1b:ed:06:20:96:b9: 5e:79:e2:8c:b2:ad:b2:5c:0f:5a:93:55:0f:a0:f0:fd:96:3a: 4c:ea:e2:86:65:d6:24:8d:65:36:62:2f:a2:92:0f:39:a1:e6: c9:2a:c6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6yIPGfhJhdMpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MWY0MjViNmQtNzA3OC00MDU1LWI4NDUtNGU0NDVkM2JlZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQgO+xyPBhOoLvUedPy2JDnhiifTThnAZWp9 6/yUmoHS3mEwXW3EKEHONendinYA1fMcF4tLqkQ2BWBp3E+9aygpuewnNC23N4MT 9VrZiuQlQHm4QmQiPcEuCfPIW+pOZmUjSrGOKqTBV72vfFg5WkwzYaPg+ANGZ1wM bRZxNJTebqihuo7LbhUk/3+Imxsv/s91RKuR36V3i7dbHp97eX3wgXf+FhBFnkjK 10YGVcEjWUf923e5JWriG9ZH9hx2SfEVCeCrbCI+DC7NV3bjizQh5viqCMU0eKmR P/WL9vG+HxxU7gR2TCDQwrgJwjwc2QTrCQK2EuBqD9eJgyMDkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCqEhlNojgfTC+LCtWfgsCOb//0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGZiM2Y3NzMtOGFhMy0z ZGQ1LWJjZjctMzlmNGNiZGZlZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlWVC7C9P1N2+qCCe1HqXyRJ2tLupgXG6mg5M1EuCp4ABEyniIE4T1O M2qBBb5QV8LPHxBnLX3C6lYEfmF9pUF6hpVqgSHFaCNcOV8yX10eO/+47vZP5qmD Rzau0N8NL6w/K3q9VVQ9skvN+TRPoxaWUo972Ltn4hklmEK8RorMabAkRSQX2Bvn 0eX/mMHP9ImhrcGAJz2VEHcXVuDL2cP6PVQM9HjeTSuoAxiJP7JcTZgEhixyF5Vm vePdTVH5yiQiDoJp/dmiKB8/bqkDCsm5wBvtBiCWuV554oyyrbJcD1qTVQ+g8P2W Okzq4oZl1iSNZTZiL6KSDzmh5skqxmE= -----END CERTIFICATE-----Generated at Mon Aug 4 14:41:28 2025 by rpki-client